PT-2022-3488 · Xen+6 · Xen+6

Roger Pau + 1 · Published 2022-07-01 · Updated 2024-09-11 · CVE-2022-33741

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue is related to a disclosure of information in the Xen hypervisor Linux kernel. It may allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2022-04269

CVE-2022-33741

DLA-3131-1

DSA-5191-1

MGASA-2022-0263

MGASA-2022-0264

OESA-2022-1774

OPENSUSE-SU-2022_2411-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

OPENSUSE-SU-2022_2741-1

OPENSUSE-SU-2022_2875-1

OPENSUSE-SU-2022_3665-1

SUSE-SU-2022:2377-1

SUSE-SU-2022:2382-1

SUSE-SU-2022:2393-1

SUSE-SU-2022:2407-1

SUSE-SU-2022:2411-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

SUSE-SU-2022:2721-1

SUSE-SU-2022:2741-1

SUSE-SU-2022:2809-1

SUSE-SU-2022:2840-1

SUSE-SU-2022:2875-1

SUSE-SU-2022:2875-2

SUSE-SU-2022:2892-1

SUSE-SU-2022:2892-2

SUSE-SU-2022:3665-1

SUSE-SU-2022:3728-1

SUSE-SU-2022:3928-1

USN-5572-1

USN-5572-2

USN-5579-1

USN-5623-1

USN-5624-1

USN-5633-1

USN-5635-1

USN-5640-1

USN-5644-1

USN-5648-1

USN-5655-1

USN-5668-1

USN-5669-1

USN-5669-2

USN-5677-1

USN-5678-1

USN-5679-1

USN-5682-1

USN-5683-1

USN-5684-1

USN-5687-1

USN-5695-1

USN-5706-1

Affected Products

Astra Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Xen

References · 671

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Markakd/CVE-2022-2588 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/0x0000000000-03/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/bb33bb/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/avboy1337/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/Ruia-ruia/CVE-2022-29582-Exploit · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-1972-infoleak-PoC · Exploit
• 🔥 https://github.com/Pwnzer0tt1/CVE-2022-36946 · Exploit
• 🔥 https://github.com/aels/CVE-2022-2586-LPE · Exploit
• 🔥 https://github.com/BassamGraini/CVE-2022-2588 · Exploit